Get free scan and check if your device is infected.
Remove it nowTo use full-featured product, you have to purchase a license for Combo Cleaner. Seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
What kind of page is underont[.]com?
While investigating suspicious websites, our research team discovered the underont[.]com rogue page. It uses a fake human verification prompt to trick visitors into allowing browser notifications. Once permission is granted, underont[.]com delivers misleading alerts and advertisements that can expose users to various online threats.
![underont[.]com ads](/images/stories/screenshots202605/underont-com-ads-main.jpg)
Underont[.]com in detail
Underont[.]com presents visitors with a nearly blank, dark-screened page alongside a browser notification prompt. The message instructs visitors to click Allow to confirm they are not a robot. This fake verification check is designed to trick users into enabling notifications from underont[.]com.
It is worth noting that underont[.]com delivers content via randomly generated subdomains. Different visitors may encounter different lures or pages depending on which subdomain they land on, so the screenshot in this article may not reflect every possible variant.
Once permission is granted, underont[.]com delivers notifications that impersonate McAfee security alerts. These fake messages claim that a firewall has blocked an untrusted connection and that files are being downloaded from the user's PC. Users are urged to click and view a "security report" - but none of these claims are real.
Clicking these notifications can lead to harmful pages. Users may be directed to phishing sites designed to steal login credentials, banking information, or other sensitive data. Tech support scam pages are another common destination, where fake system warnings push users to call fraudulent helpline numbers.
In other cases, notifications from underont[.]com may promote questionable software, fake antivirus tools, or potentially unwanted applications. Some of these ads also link to pages running cryptocurrency scams or collecting personal details through fake forms.
If underont[.]com has been granted notification permissions, this access should be revoked immediately. Failing to act can expose users to scams, malware, financial losses, and account takeovers.
| Name | Ads by underont.com |
| Threat Type | Push notifications ads, Unwanted ads, Pop-up ads |
| Threat Status (underont[.]com) | PCrisk Website Scanner Results |
| Serving IP Address | 54.225.5.143 |
| Symptoms | Seeing advertisements not originating from the sites you are browsing. Intrusive pop-up ads. Decreased Internet browsing speed. |
| Distribution Methods | Deceptive pop-up ads, false claims within visited websites, unwanted applications (adware) |
| Damage | Decreased computer performance, browser tracking - privacy issues, possible additional malware infections. |
| Malware Removal (Windows) |
To eliminate possible malware infections, scan your computer with legitimate antivirus software. Our security researchers recommend using Combo Cleaner. Download Combo CleanerTo use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com. |
More on similar pages
Users typically land on pages like underont[.]com through redirects triggered by misleading pop-ups, fake buttons, or deceptive links on unsafe websites. Rogue advertising networks, often found on torrent sites, adult content platforms, and illegal streaming services, are a common source of such redirects.
In some cases, adware installed on the device may redirect the browser to rogue pages automatically. Spam notifications from other rogue sites can also chain together, sending users to underont[.]com without any deliberate action on their part.
Additional examples of websites similar to underont[.]com are Site, Site, and Site.
How did underont[.]com gain permission to deliver spam notifications?
Browsers require explicit user permission before any website can deliver notifications. If notifications from underont[.]com are appearing on your screen, it means the site was previously visited and the Allow button (or a similar option) was clicked, either deliberately or by mistake.
How to prevent deceptive sites from delivering spam notifications?
Any website that asks you to click Allow to prove you are human, watch a video, download a file, or access content is using a deception tactic. These requests should not be followed. If such a prompt appears, either close the tab or select Block to deny notification access.
If you are currently receiving unwanted notifications from underont[.]com or other suspicious sites, run a scan with Combo Cleaner Antivirus for Windows to remove them automatically. You should also check your browser for unfamiliar extensions and your device for programs you did not install.
Appearance of underont[.]com website (GIF):
![underont[.]com website appearance (GIF)](/images/stories/screenshots202605/underont-com-ads-appearance.gif)
Notifications delivered by underont[.]com:
![underont[.]com notification](/images/stories/screenshots202605/underont-com-ads-notification2.jpg)
Instant automatic malware removal:
Manual threat removal might be a lengthy and complicated process that requires advanced IT skills. Combo Cleaner is a professional automatic malware removal tool that is recommended to get rid of malware. Download it by clicking the button below:
DOWNLOAD Combo CleanerBy downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. To use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quick menu:
- What is Ads by underont.com?
- STEP 1. Remove spam notifications from Google Chrome
- STEP 2. Remove spam notifications from Google Chrome (Android)
- STEP 3. Remove spam notifications from Mozilla Firefox
- STEP 4. Remove spam notifications from Microsoft Edge
- STEP 5. Remove spam notifications from Safari (macOS)
Disable unwanted browser notifications:
Video showing how to disable web browser notifications:
Remove spam notifications from Google Chrome:
Click the Menu button (three dots) on the right upper corner of the screen and select "Settings". In the opened window select "Privacy and security", then click on "Site Settings" and choose "Notifications".

In the "Allowed to send notifications" list search for websites that you want to stop receiving notifications from. Click on the three dots icon near the website URL and click "Block" or "Remove" (if you click "Remove" and visit the malicious site once more, it will ask to enable notifications again).

Remove spam notifications from Google Chrome (Android):
Tap the Menu button (three dots) on the right upper corner of the screen and select "Settings". Scroll down, tap on "Site settings" and then "Notifications".

In the opened window, locate all suspicious URLs and tap on them one-by-one. Once the pop-up shows up, select either "Block" or "Remove" (if you tap "Remove" and visit the malicious site once more, it will ask to enable notifications again).

Remove spam notifications from Mozilla Firefox:
Click the Menu button (three bars) on the right upper corner of the screen. Select "Settings" and click on "Privacy & Security" in the toolbar on the left hand side of the screen. Scroll down to the "Permissions" section and click the "Settings" button next to "Notifications".

In the opened window, locate all suspicious URLs and block them using the drop-down menu or either remove them by clicking "Remove Website" at the bottom of the window (if you click "Remove Website" and visit the malicious site once more, it will ask to enable notifications again).

Remove spam notifications from Microsoft Edge:
Click the menu button (three dots) on the right upper corner of the Edge window and select "Settings". Click on "Cookies and site permissions" in the toolbar on the left hand side of the screen and select "Notifications".

Click three dots on the right hand side of each suspicious URL under "Allow" section and click "Block" or "Remove" (if you click "Remove" and visit the malicious site once more, it will ask to enable notifications again).

Remove spam notifications from Safari (macOS):
Click "Safari" button on the left upper corner of the screen and select "Preferences...". Select the "Websites" tab and then select "Notifications" section on the left pane.

Check for suspicious URLs and apply the "Deny" option using the drop-down menu or either remove them by clicking "Remove" at the bottom of the window (if you click "Remove" and visit the malicious site once more, it will ask to enable notifications again)

How to avoid browser notification spam?
Internet users should be very skeptical when being asked to allow notifications. While this is a useful feature that allows you to receive timely news from websites you like, deceptive marketers frequently abuse it.
Only allow notifications from websites that you fully trust. For added security - use an anti-malware application with a real-time web browsing monitor to block shady websites that tries to trick you into allowing spam notifications. We recommend using Combo Cleaner Antivirus for Windows.
Frequently Asked Questions (FAQ)
Why am I seeing ads (browser notifications) delivered by underont[.]com in the right lower corner of my desktop?
Browsers can only send notifications from a website after the user explicitly allows it. This means underont[.]com was likely visited at some point, and the Allow option on the notification permission prompt was clicked, enabling the site to deliver notification spam.
I have clicked on notification ads, is my computer infected?
Clicking a browser notification does not directly infect your computer. However, these notifications can link to harmful pages, and the content shown on those pages may pose a risk to your device or personal information.
Is underont[.]com a virus?
Underont[.]com is not classified as a virus, but it is a rogue website that promotes browser notification spam. Pages like this frequently redirect users to scam sites, push questionable software, and expose visitors to various online threats.
Will Combo Cleaner remove underont[.]com ads automatically or manual steps are still required?
Combo Cleaner can scan your system and automatically revoke the notification permissions granted to underont[.]com. It will also block future access to this and similar rogue pages, so no additional manual steps will be needed.
Share:
Tomas Meskauskas
Expert security researcher, professional malware analyst
I am passionate about computer security and technology. I have an experience of over 10 years working in various companies related to computer technical issue solving and Internet security. I have been working as an author and editor for pcrisk.com since 2010. Follow me on Twitter and LinkedIn to stay informed about the latest online security threats.
PCrisk security portal is brought by a company RCS LT.
Joined forces of security researchers help educate computer users about the latest online security threats. More information about the company RCS LT.
Our malware removal guides are free. However, if you want to support us you can send us a donation.
DonatePCrisk security portal is brought by a company RCS LT.
Joined forces of security researchers help educate computer users about the latest online security threats. More information about the company RCS LT.
Our malware removal guides are free. However, if you want to support us you can send us a donation.
Donate
▼ Show Discussion